I appreciate your raising the question here, as maybe we can hear from people on front lines. There are, meanwhile, some interesting starting points at http://en.wikipedia.org/wiki/DDoS#Prevention_and_response